From fcd6cd2754eaea1b64d6a8bdc6f474cb73482706 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Tue, 6 Oct 2026 02:08:45 +0000 Subject: [PATCH] chore(deps): bump actions/checkout from 6.0.2 to 7.0.1 Bumps [actions/checkout](https://github.com/actions/checkout) from 6.0.2 to 7.0.1. - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](https://github.com/actions/checkout/compare/de0fac2e4500dabe0009e67214ff5f5447ce83dd...3d3c42e5aac5ba805825da76410c181273ba90b1) --- updated-dependencies: - dependency-name: actions/checkout dependency-version: 7.0.1 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] --- .github/workflows/ci.yml | 8 ++++---- .github/workflows/codeql.yml | 2 +- .github/workflows/dco.yml | 2 +- .github/workflows/dependency-review.yml | 2 +- .github/workflows/go-licenses.yml | 2 +- .github/workflows/helm-install-test.yml | 2 +- .github/workflows/helm-lint.yml | 2 +- .github/workflows/kube-linter.yml | 2 +- .github/workflows/markdown-link-check.yml | 2 +- .github/workflows/scorecard.yml | 2 +- .github/workflows/security-scan.yml | 6 +++--- 11 files changed, 16 insertions(+), 16 deletions(-) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 119e3b7..bdb1c21 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -18,7 +18,7 @@ jobs: name: golangci-lint runs-on: ubuntu-latest steps: - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v6 - uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c # v6 with: # go.mod 의 go 지시자는 "최소 요구 버전"이지 빌드 핀이 아니다. minor 라인을 @@ -40,7 +40,7 @@ jobs: name: doc drift runs-on: ubuntu-latest steps: - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v6 - name: Check documentation against implementation run: make doc-drift - name: Check the chart's CRDs against the generated ones @@ -50,7 +50,7 @@ jobs: name: unit + envtest runs-on: ubuntu-latest steps: - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v6 - uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c # v6 with: go-version: '1.26' @@ -69,7 +69,7 @@ jobs: name: build manager binary runs-on: ubuntu-latest steps: - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v6 - uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c # v6 with: go-version: '1.26' diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index 248ba79..622a668 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -29,7 +29,7 @@ jobs: matrix: language: [go] steps: - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v6 - uses: github/codeql-action/init@7211b7c8077ea37d8641b6271f6a365a22a5fbfa # v4 with: diff --git a/.github/workflows/dco.yml b/.github/workflows/dco.yml index 7705b02..ddcabb7 100644 --- a/.github/workflows/dco.yml +++ b/.github/workflows/dco.yml @@ -19,7 +19,7 @@ jobs: permissions: contents: read steps: - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v6 with: fetch-depth: 0 # need full history for the commit range ref: ${{ github.event.pull_request.head.sha }} diff --git a/.github/workflows/dependency-review.yml b/.github/workflows/dependency-review.yml index 246ae6e..8658173 100644 --- a/.github/workflows/dependency-review.yml +++ b/.github/workflows/dependency-review.yml @@ -20,7 +20,7 @@ jobs: contents: read pull-requests: write # comment the diff summary inline steps: - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v6 # 보안 tradeoff (의도적): dependency-review-action 은 GitHub Dependency graph # 가 *반드시* 있어야 동작한다. 본 org/repo 는 graph 가 미가용이라 action 이 # review 전에 hard-error 한다(게이트가 동작하지 못하고 실패 알림 메일만 양산). diff --git a/.github/workflows/go-licenses.yml b/.github/workflows/go-licenses.yml index f0eb2c2..861aa9f 100644 --- a/.github/workflows/go-licenses.yml +++ b/.github/workflows/go-licenses.yml @@ -32,7 +32,7 @@ jobs: permissions: contents: read steps: - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v6 - uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c # v6 with: # go.mod 의 go 지시자는 "최소 요구 버전"이지 빌드 핀이 아니다. minor 라인을 diff --git a/.github/workflows/helm-install-test.yml b/.github/workflows/helm-install-test.yml index 7b627b9..7a93542 100644 --- a/.github/workflows/helm-install-test.yml +++ b/.github/workflows/helm-install-test.yml @@ -28,7 +28,7 @@ jobs: runs-on: ubuntu-latest timeout-minutes: 20 steps: - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v6 with: fetch-depth: 0 diff --git a/.github/workflows/helm-lint.yml b/.github/workflows/helm-lint.yml index 0b53561..e498d01 100644 --- a/.github/workflows/helm-lint.yml +++ b/.github/workflows/helm-lint.yml @@ -13,7 +13,7 @@ jobs: lint: runs-on: ubuntu-latest steps: - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v6 with: fetch-depth: 0 - uses: azure/setup-helm@dda3372f752e03dde6b3237bc9431cdc2f7a02a2 # v5 diff --git a/.github/workflows/kube-linter.yml b/.github/workflows/kube-linter.yml index 5609ef2..96b8d86 100644 --- a/.github/workflows/kube-linter.yml +++ b/.github/workflows/kube-linter.yml @@ -34,7 +34,7 @@ jobs: contents: read security-events: write steps: - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v6 - uses: azure/setup-helm@dda3372f752e03dde6b3237bc9431cdc2f7a02a2 # v5 with: { version: v4.3.0 } diff --git a/.github/workflows/markdown-link-check.yml b/.github/workflows/markdown-link-check.yml index 10e7608..858fbee 100644 --- a/.github/workflows/markdown-link-check.yml +++ b/.github/workflows/markdown-link-check.yml @@ -22,7 +22,7 @@ jobs: link-check: runs-on: ubuntu-latest steps: - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v6 - uses: gaurav-nelson/github-action-markdown-link-check@3c3b66f1f7d0900e37b71eca45b63ea9eedfce31 # 1.0.17 with: use-quiet-mode: 'yes' diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml index 85d5c49..f34292e 100644 --- a/.github/workflows/scorecard.yml +++ b/.github/workflows/scorecard.yml @@ -25,7 +25,7 @@ jobs: # Required to read the actions used in workflows. actions: read steps: - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v6 with: persist-credentials: false diff --git a/.github/workflows/security-scan.yml b/.github/workflows/security-scan.yml index 8f140ca..7c76ddb 100644 --- a/.github/workflows/security-scan.yml +++ b/.github/workflows/security-scan.yml @@ -19,7 +19,7 @@ jobs: govulncheck: runs-on: ubuntu-latest steps: - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v6 - uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c # v6 with: # go.mod 의 go 지시자는 "최소 요구 버전"이지 빌드 핀이 아니다. minor 라인을 @@ -50,7 +50,7 @@ jobs: contents: read security-events: write # upload SARIF to code-scanning steps: - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v6 - uses: aquasecurity/trivy-action@ed142fd0673e97e23eac54620cfb913e5ce36c25 # v0.36.0 with: scan-type: fs @@ -70,7 +70,7 @@ jobs: contents: read security-events: write # upload SARIF to code-scanning steps: - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v6 - name: Build image (no push) run: docker build -t qdrant-operator:scan . - uses: aquasecurity/trivy-action@ed142fd0673e97e23eac54620cfb913e5ce36c25 # v0.36.0